Cyber Economics and AI Defence Operations

Cyber economics is a catalyst for economic growth. It is the economics of information security. The defence of critical infrastructure, including drilling platforms, power grids, and deepwater internet cables, against foreign countries’ interference involves a multi-faceted approach focused on protecting critical systems and data lakes from cyberattacks, including those originating from state-sponsored actors.

Balancing economic profitability with public investment is key to ensuring the resilience of essential services and critical infrastructure. Defence entails bolstering infrastructure resilience, managing nation-state threats, and utilising artificial intelligence (AI) in security operations. Cross-border cooperation, standardisation, and capacity building are also crucial to defence.

Key components of cybersecurity and infrastructure defence under ministries for defence and AI require a review of Transnational Agreements and Standardisation to establish baseline cybersecurity standards across supply chains to reduce complexity and enhance resilience.

This makes the Electronic Transactions Act No. 6 of 2011 a critical part of the legislative arsenal. This act may need updates to include the implementation of the UNCITRAL model law on automated contracting (Model Law or MLAC). The MLAC is aimed at reducing friction in the use of automation in contracts, including through the deployment of AI techniques and “smart contracts”, as well as in machine-to-machine electronic transactions.

Cybersecurity defence also calls for coordinated efforts and threat management agreements. This underscores the need for combined approaches, involving foreign governments, to mitigate cyber threats. Integrating AI into security and defence operations, such as threat detection and response, can enhance capabilities and provide faster responses. International Cooperation and Information Sharing are fundamental. Intelligence sharing, identifying common threats, and developing effective defence strategies are top priorities.

Establishing clear governance structures and defining responsibilities for cybersecurity within organisations, across government departments, and countries can improve accountability and efficiency. Threat Intelligence and early warning systems are needed to identify and predict potential cyberattacks, and to prepare and mitigate risks. Using network codes to establish recurrent cybersecurity risk assessments in critical sectors, like power generation, can help identify vulnerabilities and implement mitigating measures.

Penetration testing of water works, airports and seaports must be ongoing. Cyber Defence Pledges and NATO’s evolving influence in the Caribbean can strengthen national cyber defences and promote responsible state behaviour in cyberspace during the infosphere revolution. If the objective is to curate a safe and secure digital future for all, then cybersecurity cannot be measured as a cost. It is an investment in citizen safety and economic stability. Because it is an investment to deal with actions which may or may not arise in the future, the urgency of the capital outlay eludes our mindfulness in the present.

Cyber incidents are increasing at a rate of about thirty-seven per cent annually in upper-middle-income countries, and twenty-one per cent worldwide, according to a 2024 World Bank Report. Closing cybersecurity gaps can boost growth and help countries achieve their development goals. By reducing the risk of cyberattacks, cyber economics can help foster a more stable and productive digital economy.

Cyber economics focuses on policy, budgeting, procurement, advanced recovery preparation, information asymmetry, governance, and the types of goods and services involved in cybersecurity. The aim is to improve the cybersecurity posture of the state, and to understand market structures, regulatory frameworks, or their absence, and the economic consequences of cybercrime.

During the infosphere revolution, cyber economics is about deepening our understanding of the economic implications of cybersecurity and using this knowledge to improve security practices and the economic stability of the state. Cybercrime as a Service (CaaS) allows bad actors to access intricate digital toolboxes on the dark web, where Cybercrime as a Service (CaaS) is a flourishing enterprise. This dark web activity has nurtured the growth of elaborate supply chains with specialists emerging in various aspects of attack engineering.

Subcontractors and vendors now offer miscellaneous hacking and cybercrime services and toolkits on a subscription basis. This has allowed distributed teams in multiple countries with limited technical skills to coordinate and deliver sophisticated cyberattack packages. At St. Peter’s Square on Easter Sunday, Pope Francis reminded the world that “Evil has not disappeared from history; it will remain until the end.”

The global shortage of cybersecurity professionals is already about four million people. Small Island Developing States (SIDS) must invest in building talent for both reactive and proactive cybersecurity services as governments weave a mosaic of safety and security over the identity fabric of citizens and companies.

This requires regulatory frameworks at the municipal and central government levels that are in alignment with the regulatory frameworks outlined by the International Telecommunications Union (ITU) in Geneva, Switzerland, which is the oldest department of the UN. The ITU’s Global Cybersecurity Index 2024 states that land-locked developing countries and SIDS continue to face resource and capacity constraints on cybersecurity efforts.

The ITU recommends that countries must prioritize high-impact activities, including: (1) implementing legislative reform, (2) developing and regularly updating a comprehensive national cybersecurity strategy and a practical action plan, (3) enhancing incident-response capabilities, (4) delivery of capacity building and training of cybersecurity professionals, children and vulnerable groups to strengthen cybersecurity skills and building domestic resilience, and (5) fostering domestic and international cooperation on information-sharing, training opportunities, and capacity development.